This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json) Hash identifier: SxDDBNBHTVQCqReMnxi/jB4KGglQCIQJAH9/c7KXkZM= Subject key identifier: 0A:43:FD:78:75:A2:CC:50:A6:19:7A:53:5E:7B:69:7B:2C:23:79:18 Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8 Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8 Certificate serial: 019BF507898661987F9DADD1705E25EC3EF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft Manifest number: 0B58 Signing time: Sun 25 Jan 2026 12:01:10 +0000 Manifest this update: Sun 25 Jan 2026 12:01:10 +0000 Manifest next update: Mon 26 Jan 2026 12:01:10 +0000 Files and hashes: 1: A4IQPKMY2VOtogijBuwLkSr_g5k.asa (hash: tj8IYv9LlTx0IXapf0CTWli/SmSES+YcjhcSCMOAsus=) 2: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: BRWRBDQF2fkQ0z1LVBghwZFUh/5B+iIOK0T3JDL2poQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:89:86:61:98:7f:9d:ad:d1:70:5e:25:ec:3e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8 Validity Not Before: Jan 25 12:01:10 2026 GMT Not After : Jan 26 12:01:10 2026 GMT Subject: CN=0a43fd7875a2cc50a6197a535e7b697b2c237918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:6d:bf:e7:99:4d:10:c1:e8:98:f4:00:6a: e6:0c:b3:a1:c6:ba:9d:75:ce:d1:51:04:e8:ca:2b: f3:0d:ad:ce:90:a5:ea:5b:73:60:47:9a:2e:60:45: 71:e1:2d:46:18:b5:54:fa:b7:e7:5a:7d:07:66:33: d0:71:0c:de:ba:fd:0c:6b:2a:05:69:19:ae:68:2b: d5:1f:bb:67:96:ed:5f:1c:08:62:4a:ef:2b:9f:df: d7:a8:9c:b9:93:6f:de:56:21:16:d8:ff:c8:3b:39: 6a:b3:eb:37:89:0c:c9:62:a1:6b:6f:da:c9:9f:82: b8:99:df:f4:42:d4:2e:9c:a4:d5:98:1e:10:9a:3f: 0a:ad:d9:eb:19:eb:bf:ff:07:32:c6:25:52:e1:4e: 10:4c:b8:7a:85:ff:02:ac:36:0c:bb:40:25:2d:16: ca:65:dc:ae:95:b3:24:1e:dd:79:93:6c:26:b7:a3: 3d:19:8d:85:fa:28:21:d2:cc:8d:9e:92:fa:e5:95: 87:e1:1c:81:fc:07:ca:93:bd:ce:e3:95:b9:eb:fe: c6:3a:ed:f0:14:6d:46:e0:9a:5c:00:34:98:b7:a0: ab:a0:71:be:a0:95:ec:8e:8b:ba:a2:d3:7f:18:9b: af:d9:91:d4:3f:de:a1:df:1a:96:28:d2:af:6b:aa: 7b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:43:FD:78:75:A2:CC:50:A6:19:7A:53:5E:7B:69:7B:2C:23:79:18 X509v3 Authority Key Identifier: keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:75:bc:12:12:4c:a2:53:9f:5a:aa:10:ee:02:17:0c:66:9a: 24:98:93:7e:b5:8f:b3:a8:a3:16:6a:66:f2:cc:8a:7c:b0:1b: 88:2c:61:85:94:f0:c4:7d:c2:e0:a9:e5:a5:4f:d1:6a:39:c0: 34:32:9a:6d:e7:e2:80:67:83:5a:ef:bb:43:8b:35:56:00:74: 46:d8:e4:de:01:a9:e8:54:9c:28:41:4b:f3:b3:16:fa:00:4e: fd:4c:5e:4b:2b:0b:5a:10:61:b2:9d:c0:a5:ea:37:7d:35:b2: 4c:ef:49:5b:e2:0c:8c:c8:0c:86:53:c5:b2:0e:48:2b:93:07: 16:3f:1b:e3:5e:08:3f:5f:39:d1:78:c6:50:1f:f5:be:ca:98: cd:a9:d0:bc:ea:ea:37:98:a0:fe:90:6c:f4:f0:05:2e:90:94: d0:07:86:dd:ae:4a:19:7c:02:b3:e2:fa:18:b1:9b:e4:d9:df: 31:90:8d:4f:f3:10:fe:95:30:3d:97:70:90:07:b4:d8:ba:26: 41:af:da:49:1d:e0:a0:ed:89:69:99:da:96:2c:32:f9:e3:32: da:0f:ea:82:f2:80:a5:a8:d5:ff:23:ce:ea:fe:ca:66:06:a6: 5b:f3:17:ea:fc:78:b2:84:74:55:1b:27:92:b6:40:d2:50:b5: 71:69:cf:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B4mGYZh/na3RcF4l7D7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTI3YTFjZTc3YmNkNGM2NDk3ZTI4NWJmMmJhNmYzMjQ0 MzllYjgwHhcNMjYwMTI1MTIwMTEwWhcNMjYwMTI2MTIwMTEwWjAzMTEwLwYDVQQD EygwYTQzZmQ3ODc1YTJjYzUwYTYxOTdhNTM1ZTdiNjk3YjJjMjM3OTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/xtv+eZTRDB6Jj0AGrmDLOhxrqd dc7RUQToyivzDa3OkKXqW3NgR5ouYEVx4S1GGLVU+rfnWn0HZjPQcQzeuv0MayoF aRmuaCvVH7tnlu1fHAhiSu8rn9/XqJy5k2/eViEW2P/IOzlqs+s3iQzJYqFrb9rJ n4K4md/0QtQunKTVmB4Qmj8KrdnrGeu//wcyxiVS4U4QTLh6hf8CrDYMu0AlLRbK ZdyulbMkHt15k2wmt6M9GY2F+igh0syNnpL65ZWH4RyB/AfKk73O45W56/7GOu3w FG1G4JpcADSYt6CroHG+oJXsjou6otN/GJuv2ZHUP96h3xqWKNKva6p7ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApD/Xh1osxQphl6U157aXssI3kYMB8GA1UdIwQY MBaAFHDiehzne81MZJfihb8rpvMkQ564MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2Mt MGJlYzk2Nzg3OTM3LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2MtMGJlYzk2Nzg3OTM3 LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXW8EhJM olOfWqoQ7gIXDGaaJJiTfrWPs6ijFmpm8syKfLAbiCxhhZTwxH3C4KnlpU/RajnA NDKabefigGeDWu+7Q4s1VgB0Rtjk3gGp6FScKEFL87MW+gBO/UxeSysLWhBhsp3A peo3fTWyTO9JW+IMjMgMhlPFsg5IK5MHFj8b414IP1850XjGUB/1vsqYzanQvOrq N5ig/pBs9PAFLpCU0AeG3a5KGXwCs+L6GLGb5NnfMZCNT/MQ/pUwPZdwkAe02Lom Qa/aSR3goO2JaZnaliwy+eMy2g/qgvKApajV/yPO6v7KZgamW/MX6vx4soR0VRsn krZA0lC1cWnPyw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:22:34 2026 by rpki-client